GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
KEV

Known Exploited Vulnerabilities Catalog

External catalog of known exploited vulnerabilities conforming to GCVE BCP-07 standard.
Catalog UUID: caeb2787-0d58-4236-9039-7c86c3e566f3 (Previdian)

Publication activity Vulnerabilities this catalog listed per day, by its earliest observation date (first seen, then recorded, falling back to the status update). Select a day to filter the entries below.

Hover a day to see what this catalog listed on it.

Less More
Vulnerability ID Status Exploited Status Updated Evidence Characteristics Actions
CVE-2026-39808
Fortinet - FortiSandbox , Fortinet - FortiSandbox PaaS
Confirmed
Asserted: 2026-06-12
Yes 2026-06-12
First seen: 2026-06-12
1 source
public_report
- Details
CVE-2021-31805
Apache Software Foundation - Apache Struts
Confirmed
Asserted: 2026-06-12
Yes 2026-06-12
First seen: 2026-06-12
1 source
public_report
- Details
CVE-2021-30128
Apache Software Foundation - Apache OFBiz
Confirmed
Asserted: 2026-06-12
Yes 2026-06-12
First seen: 2026-06-12
1 source
public_report
- Details
CVE-2020-6286
SAP SE - SAP NetWeaver AS JAVA (LM Configuration Wizard)
Confirmed
Asserted: 2026-06-12
Yes 2026-06-12
First seen: 2026-06-12
1 source
public_report
- Details
CVE-2026-35273
Oracle Corporation - PeopleSoft Enterprise PeopleTools
Confirmed
Asserted: 2026-06-11
Yes 2026-06-11
First seen: 2026-06-11
1 source
public_report
- Details
CVE-2026-10795
davidanderson - UpdraftPlus: WP Backup & Migration Plugin
Confirmed
Asserted: 2026-06-11
Yes 2026-06-11
First seen: 2026-06-11
1 source
public_report
- Details
CVE-2025-5821
Case-Themes - Case Theme User
Confirmed
Asserted: 2026-06-11
Yes 2026-06-11
First seen: 2026-06-11
1 source
public_report
- Details
CVE-2026-5027
langflow-ai - langflow
Confirmed
Asserted: 2026-06-10
Yes 2026-06-10
First seen: 2026-06-10
1 source
public_report
- Details
CVE-2026-10520
ivanti - Sentry
Confirmed
Asserted: 2026-06-10
Yes 2026-06-10
First seen: 2026-06-10
1 source
public_report
- Details
CVE-2026-11645
Google - Chrome
Confirmed
Asserted: 2026-06-09
Yes 2026-06-09
First seen: 2026-06-09
1 source
public_report
- Details
displaying 231 - 240 KEV entries in total 2726
About this Catalog

Evidence-backed KEV intelligence enriched with confidence scoring, exploitation status, CISA KEV status, and sensor telemetry.

This Known Exploited Vulnerabilities (KEV) catalog conforms to the GCVE BCP-07 standard (Best Current Practice) standard for documenting vulnerabilities with confirmed or suspected active exploitation.

Each entry includes exploitation status, evidence sources, and characteristics to help organizations prioritize vulnerability remediation efforts.